This advisory covers a series of security flaws in FreeRDP, including heap-buffer overflows (e.g., CVE-2026-22852, CVE-2026-22853), global-buffer overflow (CVE-2026-22858), heap-use-after-free bugs (e.g., CVE-2026-22856), NULL pointer dereference (CVE-2026-23948), denial of service vulnerabilities via buffer overflow and use-after-free conditions, and multiple arbitrary code execution vulnerabilities (e.g., CVE-2026-26965, CVE-2026-26955, CVE-2026-31806, CVE-2026-33984). These vulnerabilities affect the FreeRDP client component used in Red Hat Enterprise Linux 10 and its variants. The vulnerabilities stem from memory corruption and improper handling of crafted RDP messages or pixel data, potentially allowing attackers to execute arbitrary code or cause denial of service. Red Hat has released security updates to fix these issues.

The vulnerabilities can lead to denial of service conditions or arbitrary code execution on systems running vulnerable versions of FreeRDP. This could allow an attacker to crash the client or execute malicious code remotely by sending specially crafted RDP messages or pixel data. The impact is rated as high by Red Hat Product Security. No known exploits in the wild have been reported at this time.

Red Hat has released security updates for FreeRDP in Red Hat Enterprise Linux 10 and related CodeReady Linux Builder products to address these vulnerabilities. Users should apply the available updates as described in the Red Hat advisory RHSA-2026:19033 (https://access.redhat.com/errata/RHSA-2026:19033). Patch status is confirmed as fixed in these updates. No additional mitigation steps are indicated beyond applying the official patches.